AWS IAM Technical Lead

AWS IAM Technical Lead

Purpose

The purpose of the AWS IAM Technical Lead is to provide the highest level of expertise to the team, customers, and stakeholders relative to any ongoing project or endeavor. This position is responsible for fostering an environment that encourages critical thinking, collaboration, iterative enhancements to processes and configurations, automation, security, resiliency, and consistency. Successfully supporting the ever-growing enterprise environment and maintaining security requires forward thinking and quick understanding of complex issues to assist in the removal of implementation barriers. Additionally, this requires an individual that strives to challenge themselves and grow quickly to better understand, represent, and own a large enterprise AWS IAM platform via implementation and support duties aligned therein.

Implementation

• Operate as the senior technical expert and representative of the AWS IAM deployment within the enterprise cloud environment
• Utilize various AWS tools and programming languages, such as Terraform, to increase the productivity and redundancy of repetitive activities
• Design policy templates that enforce company-specific requirements that disallow any change to the enterprise that would cause a compromise of access or data integrity
• Engineer and deploy AWS IAM resources including users, groups, roles, and policies using AWS CloudFormation templates as part of daily activities to support business requirements, application integrations, workloads, regulatory compliance, and other deliverables
• Actively monitor and respond accordingly to AWS IAM configuration changes, events, and alerts following applicable CIE team process and procedures
• Adhere to Jira Agile methodology and ITIL practices to deploy changes within the production infrastructure
• Create and deploy CloudFormation templates as required to grant or deny access to services and functions for various accounts, roles, and groups
• Ensure quick resolution of any impeded activities that require internal or external engagements for resolution to prevent negative impacts to velocity and delivery
• Troubleshoot and resolve complex template issues that require expert-level understanding of current environment and AWS IAM best practices

Support

• Support various stakeholders and application team projects by understanding functional needs of intended operations and implementing templatized solutions that contribute to the overall automation, resiliency, and reliability of the AWS IAM platform.
• Lead efforts concentrated on the improvement of the security, health, and availability of the AWS IAM infrastructure including defining patterns to implement appropriate persona templates, reducing one-off solutions within accounts, establishing proper permission boundaries, reviewing existing permissions to enforce least-privilege, and eliminating implementation defects
• Influence the responses of operational disruptions and lobby long-term solutions and improvements that would mitigate future availability and stability risks by participating in the design and development of capabilities and features through proofs of concept and working sessions
• Maintain and propagate team and stakeholder knowledge concerning security/hardening requirements, boundary requirements, virtual environment separation, compliance standards, and least privilege
• Organize strategic planning sessions that ensure team concentration remains on automation, development, implementation standardization, refinement, cycle time and defect reduction, and skill progression to maintain a proactive posture for upcoming projects and requirements
• Design and publish supporting technical documentation, drawings, and guides to facilitate more accurate, standardized practices within the team that can be easily replicated
• Leverage various logging solutions to query and extract data necessary to ensure compliance and hardening requirements are maintained within the enterprise utilizing applications such as Splunk and Prisma
• Perform scheduled code review activities with team to assist implementation and remediation efforts included within the delivery of technically complex requirements
• Practice excellent organizational and communication skills necessary to facilitate stakeholder, team, and leadership engagements that require professional, tactful delivery of IAM solutions and justification of necessary improvements or adjustments

Requirements:

• Bachelor’s degree or equivalent work experience
• 8+ years of experience directly supporting AWS IAM operations and implementation
• At least 6 years of experience with AWS with at least 2 of which directly supported infrastructure application components
• 5+ years of cloud platform experience in enterprise implementations
• At least one AWS certification for Developer, Solutions Architect, or SysOps Administration
• 2+ years of experience in Agile practices and Jira platform
• 2+ years of experience with ServiceNow platform
• 2+ years of experience with DevOps platforms such as Jenkins
• 2 + years of experience with multiple programming languages such as C++, Java, Python, or SQL
• Cross-functional understanding of architecture, security, and operations
• Operational experience with Active Directory (LDAP), Unix, and Cloud services
• Ability to propose and implement creative solutions by exercising critical and logical thinking skills
• Proven ability to solve process-related problems and perform within strict timely deadlines